
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
File: quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json)
Hash identifier: SGOyJnoXQ+IxoBk3W3QzaozLqRNUaAK5Cryi9xP7kBM=
Subject key identifier: 21:D6:F1:3A:86:F2:65:CD:95:0F:2D:A8:4C:A2:DB:A5:F6:EF:47:C6
Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5
Certificate issuer: /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
Manifest number: 010F
Signing time: Sun 05 Apr 2026 05:24:42 +0000
Manifest this update: Sun 05 Apr 2026 05:24:41 +0000
Manifest next update: Sun 12 Apr 2026 05:24:41 +0000
Files and hashes: 1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: TliG0JY/CzllMIZKcmTVGHtPx2zTxAsTvGdzPxCNxxQ=)
2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: OXlWMlN/9eXJBuwyCfwBJ/3whRZMwq6quUWKtVMgPJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl
rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
Validity
Not Before: Apr 5 05:24:41 2026 GMT
Not After : Apr 12 05:24:41 2026 GMT
Subject: CN=69d1f219-1843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:4d:ce:86:d0:ec:d6:7e:8d:29:60:be:73:
38:a4:9e:ea:f7:5b:1b:19:18:83:f5:35:9f:85:20:
93:42:b6:97:aa:3c:a9:e0:d5:c3:c3:c8:99:d4:3c:
57:0d:57:82:08:a4:79:8e:ec:c4:a8:b0:b3:75:c8:
b3:e5:41:8b:63:de:22:84:41:48:39:85:86:01:ce:
a5:1f:f0:77:66:3d:1c:78:80:2d:23:62:34:92:a4:
c7:f9:86:21:fe:05:85:ac:e0:9b:6a:72:5e:cb:29:
2c:2b:6d:9e:e9:56:98:8b:e5:27:1e:ce:2b:9d:d1:
12:82:d6:7d:15:1d:6f:0f:cf:df:96:80:a9:ef:7c:
04:e3:34:8b:0f:40:e7:15:d0:b3:bf:4d:b6:8d:f8:
e2:72:27:a6:c1:ee:2d:82:75:74:94:17:f2:c7:85:
89:dc:75:50:a4:b1:e7:94:5c:40:14:e4:62:d1:7e:
88:e3:6f:ac:64:33:10:fd:b1:3d:64:03:00:80:80:
6c:36:49:e5:a9:e9:1e:a9:7d:8a:fc:2c:0e:f8:52:
82:ef:47:92:77:be:12:fd:39:e4:e1:72:d2:2b:1e:
c1:74:98:ae:33:a2:78:f9:a2:18:d6:61:35:b4:cb:
c5:0d:6c:fa:c2:57:28:37:0d:88:57:bd:13:c5:ee:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D6:F1:3A:86:F2:65:CD:95:0F:2D:A8:4C:A2:DB:A5:F6:EF:47:C6
X509v3 Authority Key Identifier:
keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:cf:93:0f:29:df:13:61:d8:a0:9e:57:36:a2:77:40:65:
93:e1:0c:44:1d:06:82:dc:05:a9:52:2d:c1:0a:25:5e:a4:c7:
33:03:0c:0f:c1:a5:6e:b5:68:bf:2c:ae:93:1f:37:70:17:7e:
7e:f9:6f:f8:df:20:1e:31:23:e2:0e:56:f3:f0:da:42:a3:6f:
b0:33:6c:2a:65:6a:9d:a9:26:24:09:dc:a7:0c:13:5f:7d:25:
c3:9e:8f:a8:c4:7b:f5:a9:77:48:11:30:dc:04:66:97:96:b0:
cd:f2:49:be:0c:08:be:3e:a7:5b:81:84:ee:34:c6:8b:96:9f:
42:7d:ac:72:8a:62:7d:23:ea:07:a0:57:20:ea:97:55:4a:00:
50:93:26:cf:83:de:60:3e:57:81:cd:c1:33:ea:d5:3f:72:6d:
cf:9f:47:02:4b:1c:c5:77:ce:6e:ce:1d:a2:44:14:07:4c:8e:
0c:24:0a:c3:52:37:06:91:cf:b9:9f:56:be:82:56:0a:ee:78:
18:11:eb:3d:0e:32:d0:dc:99:98:77:3b:11:18:96:8c:55:c5:
ff:49:cc:2c:db:a8:64:39:2a:60:c0:64:0e:9d:89:9d:9e:0a:
75:d3:a6:8d:c8:d8:e7:ab:46:ce:8b:e9:19:43:95:b4:36:5d:
6c:64:34:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI0ODkxMTAvBgNVBAUTKEFBRTU3NTlBN0U5OEFBNzQ1ODU5OERFM0MxOUFBMTc5
N0YwMEY1RjUwHhcNMjYwNDA1MDUyNDQxWhcNMjYwNDEyMDUyNDQxWjAYMRYwFAYD
VQQDEw02OWQxZjIxOS0xODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/VNzobQ7NZ+jSlgvnM4pJ7q91sbGRiD9TWfhSCTQraXqjyp4NXDw8iZ1DxX
DVeCCKR5juzEqLCzdciz5UGLY94ihEFIOYWGAc6lH/B3Zj0ceIAtI2I0kqTH+YYh
/gWFrOCbanJeyyksK22e6VaYi+UnHs4rndESgtZ9FR1vD8/floCp73wE4zSLD0Dn
FdCzv022jfjiciemwe4tgnV0lBfyx4WJ3HVQpLHnlFxAFORi0X6I42+sZDMQ/bE9
ZAMAgIBsNknlqekeqX2K/CwO+FKC70eSd74S/Tnk4XLSKx7BdJiuM6J4+aIY1mE1
tMvFDWz6wlcoNw2IV70Txe4fvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHW8TqG
8mXNlQ8tqEyi26X270fGMB8GA1UdIwQYMBaAFKrldZp+mKp0WFmN48GaoXl/APX1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zQTNGMjgzNjlC
RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFuUllXWTNqd1pxaGVYOEE5
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3F1VjFtbjZZcW5SWVdZM2p3WnFoZVg4QTlmVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjQ4OS8zQTNGMjgzNjlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFu
UllXWTNqd1pxaGVYOEE5ZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPa3Pkw8p3xNh2KCeVzaid0Blk+EMRB0GgtwFqVItwQolXqTHMwMMD8GlbrVo
vyyukx83cBd+fvlv+N8gHjEj4g5W8/DaQqNvsDNsKmVqnakmJAncpwwTX30lw56P
qMR79al3SBEw3ARml5awzfJJvgwIvj6nW4GE7jTGi5afQn2scopifSPqB6BXIOqX
VUoAUJMmz4PeYD5Xgc3BM+rVP3Jtz59HAkscxXfObs4dokQUB0yODCQKw1I3BpHP
uZ9WvoJWCu54GBHrPQ4y0NyZmHc7ERiWjFXF/0nMLNuoZDkqYMBkDp2JnZ4KddOm
jcjY56tGzovpGUOVtDZdbGQ0XA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:33 2026 by rpki-client